<?php

namespace App\Http\Middleware;

use App\Services\InsForge\InsForgeAuthService;
use Closure;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Symfony\Component\HttpFoundation\Response;

class RefreshInsForgeToken
{
    public function __construct(private readonly InsForgeAuthService $auth) {}

    public function handle(Request $request, Closure $next): Response
    {
        $expiresIn = InsForgeAuthService::accessTokenExpiresInSeconds();

        if ($expiresIn !== null && $expiresIn < 60 && ! $this->auth->refreshAccessToken()) {
            Auth::guard('web')->logoutCurrentDevice();

            if ($request->user()) {
                $request->session()->invalidate();
                $request->session()->regenerateToken();
            }
        }

        return $next($request);
    }
}